Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 1 | # |
dp-arm | 52b1fe5 | 2017-03-07 10:08:42 +0000 | [diff] [blame] | 2 | # Copyright (c) 2015-2017, ARM Limited and Contributors. All rights reserved. |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 3 | # |
dp-arm | fa3cf0b | 2017-05-03 09:38:09 +0100 | [diff] [blame] | 4 | # SPDX-License-Identifier: BSD-3-Clause |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 5 | # |
| 6 | |
| 7 | include drivers/auth/mbedtls/mbedtls_common.mk |
| 8 | |
David Cunado | b101018 | 2017-05-08 09:48:34 +0100 | [diff] [blame] | 9 | # The platform may define the variable 'TF_MBEDTLS_KEY_ALG' to select the key |
Soby Mathew | 13b1605 | 2017-08-31 11:49:32 +0100 | [diff] [blame^] | 10 | # algorithm to use. If the variable is not defined, select it based on algorithm |
| 11 | # used for key generation `KEY_ALG`. If `KEY_ALG` is not defined or is |
| 12 | # defined to `rsa`, then set the variable to `rsa`. |
David Cunado | b101018 | 2017-05-08 09:48:34 +0100 | [diff] [blame] | 13 | ifeq (${TF_MBEDTLS_KEY_ALG},) |
Soby Mathew | 13b1605 | 2017-08-31 11:49:32 +0100 | [diff] [blame^] | 14 | ifeq (${KEY_ALG}, ecdsa) |
| 15 | TF_MBEDTLS_KEY_ALG := ecdsa |
| 16 | else |
| 17 | TF_MBEDTLS_KEY_ALG := rsa |
| 18 | endif |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 19 | endif |
| 20 | |
David Cunado | b101018 | 2017-05-08 09:48:34 +0100 | [diff] [blame] | 21 | # If MBEDTLS_KEY_ALG build flag is defined use it to set TF_MBEDTLS_KEY_ALG for |
| 22 | # backward compatibility |
| 23 | ifdef MBEDTLS_KEY_ALG |
| 24 | ifeq (${ERROR_DEPRECATED},1) |
| 25 | $(error "MBEDTLS_KEY_ALG is deprecated. Please use the new build flag TF_MBEDTLS_KEY_ALG") |
| 26 | endif |
| 27 | $(warning "MBEDTLS_KEY_ALG is deprecated. Please use the new build flag TF_MBEDTLS_KEY_ALG") |
| 28 | TF_MBEDTLS_KEY_ALG := ${MBEDTLS_KEY_ALG} |
| 29 | endif |
| 30 | |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 31 | MBEDTLS_CRYPTO_SOURCES := drivers/auth/mbedtls/mbedtls_crypto.c \ |
| 32 | $(addprefix ${MBEDTLS_DIR}/library/, \ |
| 33 | bignum.c \ |
| 34 | md.c \ |
| 35 | md_wrap.c \ |
| 36 | pk.c \ |
| 37 | pk_wrap.c \ |
| 38 | pkparse.c \ |
| 39 | pkwrite.c \ |
| 40 | sha256.c \ |
| 41 | ) |
| 42 | |
| 43 | # Key algorithm specific files |
David Cunado | b101018 | 2017-05-08 09:48:34 +0100 | [diff] [blame] | 44 | ifeq (${TF_MBEDTLS_KEY_ALG},ecdsa) |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 45 | MBEDTLS_CRYPTO_SOURCES += $(addprefix ${MBEDTLS_DIR}/library/, \ |
| 46 | ecdsa.c \ |
| 47 | ecp_curves.c \ |
| 48 | ecp.c \ |
| 49 | ) |
David Cunado | c7a1b19 | 2017-05-10 16:38:44 +0100 | [diff] [blame] | 50 | TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_ECDSA |
David Cunado | b101018 | 2017-05-08 09:48:34 +0100 | [diff] [blame] | 51 | else ifeq (${TF_MBEDTLS_KEY_ALG},rsa) |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 52 | MBEDTLS_CRYPTO_SOURCES += $(addprefix ${MBEDTLS_DIR}/library/, \ |
| 53 | rsa.c \ |
| 54 | ) |
David Cunado | c7a1b19 | 2017-05-10 16:38:44 +0100 | [diff] [blame] | 55 | TF_MBEDTLS_KEY_ALG_ID := TF_MBEDTLS_RSA |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 56 | else |
David Cunado | b101018 | 2017-05-08 09:48:34 +0100 | [diff] [blame] | 57 | $(error "TF_MBEDTLS_KEY_ALG=${TF_MBEDTLS_KEY_ALG} not supported on mbed TLS") |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 58 | endif |
| 59 | |
dp-arm | 52b1fe5 | 2017-03-07 10:08:42 +0000 | [diff] [blame] | 60 | # Needs to be set to drive mbed TLS configuration correctly |
David Cunado | c7a1b19 | 2017-05-10 16:38:44 +0100 | [diff] [blame] | 61 | $(eval $(call add_define,TF_MBEDTLS_KEY_ALG_ID)) |
Juan Castillo | a57a4d5 | 2015-04-02 15:44:20 +0100 | [diff] [blame] | 62 | |
| 63 | BL1_SOURCES += ${MBEDTLS_CRYPTO_SOURCES} |
| 64 | BL2_SOURCES += ${MBEDTLS_CRYPTO_SOURCES} |